Test authorization to remove contributors
Refactor contributor removal controller specs

We adopt the style used in the OrganizationInvitation controller tests,
which only assert that we:

  1. authorize the resource
  2. assert the behavior when a user is and is not authorized to perform
     a given action